Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UfqCnPac1env-eKa1Z4NxFMfLKg.roa
File: UfqCnPac1env-eKa1Z4NxFMfLKg.roa (raw, json)
Hash identifier: uvn4fqMsedZTmagm77MX8DZm6N260gM2XJtSTu8TfGU=
Subject key identifier: 51:FA:82:9C:F6:9C:D5:E9:EF:F9:E2:9A:D5:9E:0D:C4:53:1F:2C:A8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DE2BF71B82ADC1252201B2F95DCEC1622
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UfqCnPac1env-eKa1Z4NxFMfLKg.roa
Signing time: Fri 01 May 2026 08:54:50 +0000
ROA not before: Fri 01 May 2026 08:54:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 82.152.114.0/24 maxlen: 24
82.152.143.0/24 maxlen: 24
82.152.186.0/24 maxlen: 24
82.153.114.0/24 maxlen: 24
109.176.203.0/24 maxlen: 24
109.176.230.0/24 maxlen: 24
213.218.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:bf:71:b8:2a:dc:12:52:20:1b:2f:95:dc:ec:16:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 1 08:54:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51fa829cf69cd5e9eff9e29ad59e0dc4531f2ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:c3:8a:14:2f:bb:e0:21:86:b3:4e:ea:e5:
b4:24:d8:20:2b:93:3b:68:32:dd:8c:d8:47:87:6a:
37:3b:4e:97:3d:99:6f:f4:37:a5:db:37:44:94:44:
8c:66:3b:a5:24:f4:b5:43:bc:27:eb:e0:2c:b1:6b:
62:1a:7d:8e:d6:20:19:5d:92:92:7d:b7:af:04:03:
1c:45:5f:08:92:97:75:4f:04:e0:61:db:1c:f8:fe:
41:57:a7:30:b4:a7:22:4f:fb:67:b0:c6:d6:e2:61:
e3:c6:7f:4a:e7:fe:fe:5e:f0:04:5e:af:11:07:9f:
b7:8c:2b:99:1e:65:8b:19:76:d0:71:7b:4c:6e:5d:
82:09:7d:0e:65:af:df:ac:1f:65:6c:96:b1:cc:2a:
68:25:ce:5a:b6:ca:da:32:6f:ae:d7:75:ac:95:35:
b3:08:e4:32:ac:f1:76:da:31:dc:4e:03:63:2f:5b:
60:07:14:d4:02:2e:32:13:47:a3:25:82:b9:dd:9b:
61:2c:40:dc:c1:70:41:04:44:63:69:da:86:c4:4b:
7a:4f:08:10:b6:cd:8b:15:bc:a6:5c:3c:40:b1:a1:
e3:bd:b8:6d:c8:8b:f1:c0:9d:00:6e:53:ff:b6:dd:
aa:90:f9:da:14:6d:2c:27:0d:dc:fd:2f:24:ae:0d:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FA:82:9C:F6:9C:D5:E9:EF:F9:E2:9A:D5:9E:0D:C4:53:1F:2C:A8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/UfqCnPac1env-eKa1Z4NxFMfLKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.114.0/24
82.152.143.0/24
82.152.186.0/24
82.153.114.0/24
109.176.203.0/24
109.176.230.0/24
213.218.247.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9d:0e:3a:36:9b:ec:f5:5e:7b:dc:97:36:9f:3c:83:ea:1c:
11:67:84:1d:63:74:34:d0:03:73:fe:97:e3:2b:0e:89:3d:46:
fd:1b:17:e7:82:53:f2:6b:ee:d0:35:72:64:46:62:75:91:d1:
fa:c9:38:0e:b0:0e:b8:20:fb:ea:9f:58:04:25:d1:bb:b0:8c:
dc:f3:ca:58:e4:4c:9b:c9:aa:36:b0:4d:53:39:5d:ca:c4:33:
6d:32:bf:2e:c1:0c:80:13:65:79:41:26:cb:8d:c7:02:c8:c0:
c8:0e:fa:cf:4d:ac:35:57:c7:d5:f9:10:d9:67:fd:f6:39:a5:
9d:9f:95:23:43:1c:b3:ee:00:13:55:bb:45:21:38:1c:5d:b7:
3f:a3:7b:44:6a:75:ac:d2:93:f3:3f:24:f2:60:3e:4f:23:5b:
68:07:35:03:ce:06:a0:6a:00:a6:6b:23:b2:fd:50:97:d1:0d:
0b:78:71:79:d9:e3:48:71:26:47:66:52:f1:22:57:4d:94:62:
a1:29:cd:7c:51:12:e8:65:50:d7:88:7e:82:e9:72:7b:3b:d2:
21:39:b5:57:aa:63:a8:0d:b3:e0:e2:06:90:1b:41:8a:9f:17:
41:8c:e9:72:2e:b9:7b:e8:9f:49:04:94:41:1b:57:ec:31:67:
f2:92:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:39 2026 by rpki-client